Name
Strayer University
Security Awareness Training Program
CIS 359 – Disaster Recovery Management
Assignment 7: Security Awareness Training Program
Due Week 14 and worth 75 points
You have been tasked with developing a security awareness training program for your organization. The
goal is to educate employees about security best practices and the importance of safeguarding sensitive
information.
Write a paper in which you:
1. **Explain the importance of security awareness training in an organization's overall
cybersecurity strategy. Discuss how well-informed employees can contribute to a more secure
environment.
2. **Identify at least five (5) key topics that should be covered in a security awareness training
program. For each topic, explain why it's important and how it contributes to security.
3. **Discuss the methods and tools that can be used to deliver security awareness training to
employees. Consider both in-person and online training options.
4. **Explain the role of phishing simulations and social engineering awareness in security training.
Discuss how these exercises can help employees recognize and respond to threats.
5. **Describe the importance of measuring the effectiveness of the security awareness training
program. Explain how organizations can assess employee knowledge and behavior changes.
6. **Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar
Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
Be typed, double-spaced, using Times New Roman font (size 12), with one-inch margins on all sides;
citations and references must follow APA or school-specific format. Check with your professor for any
additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the professor’s name,
the course title, and the date. The cover page and the reference page are not included in the required
assignment page length.
The specific course learning outcomes associated with this assignment are:
Explain the importance of security awareness training in an organization's overall cybersecurity strategy.
Identify key topics for inclusion in a security awareness training program.
Discuss methods and tools for delivering security awareness training.
Describe the role of phishing simulations and social engineering awareness in security training.
Explain the importance of measuring the effectiveness of security awareness training.
Grading for this assignment will be based on answer quality, logic / organization of the paper, and
language and writing skills, using the following rubric.
Points: 75 Assignment 7: Security Awareness Training Program
Criteria Unacceptable
Below 60% F
Meets
Minimum
Expectations
60-69% D
Fair
70-79% C
Proficient
80-89% B
Exemplary
90-100% A
1. Explain the basic
primary tasks, ongoing
evaluations, and major
policy and procedural
changes that would be
needed to perform as
the BC lead / manager.
Weight: 20%
Did not submit or
incompletely
explained the
basic primary
tasks, ongoing
evaluations, and
major policy and
procedural
changes that
would be needed
to perform as the
BC lead /
manager.
Insufficiently
explained the
basic primary
tasks, ongoing
evaluations,
and major
policy and
procedural
changes that
would be
needed to
perform as the
BC lead /
manager.
Partially
explained the
basic primary
tasks, ongoing
evaluations,
and major
policy and
procedural
changes that
would be
needed to
perform as the
BC lead /
manager.
Satisfactorily
explained the
basic primary
tasks, ongoing
evaluations,
and major
policy and
procedural
changes that
would be
needed to
perform as the
BC lead /
manager.
Thoroughly
explained the
basic primary
tasks, ongoing
evaluations,
and major
policy and
procedural
changes that
would be
needed to
perform as the
BC lead /
manager.
2. Provide insight on
how to plan the
presentation to garner
management and
